alamthal-sql.txt

Default.ASPX SQL Injection Vulnerability: Al-Amthal HRMS Solution-Optimum Remote: Yes Local: Yes Class: Input Validation Error Critical: Moderately critical URL: http://www.example.com/optimum/default.aspx?page=Search&app=Search&srch=sql sql=-1//UNION//ALL//SELECT//1,2 Published: April 6, 2008...

SCO UnixWare Merge mcd Local Root Exploit

Exploit for sco platform in category local exploits ========================================= SCO UnixWare Merge mcd Local Root Exploit ========================================= / 04/2008: public release I have'nt seen any advisory on this; possibly still not fixed. SCO UnixWare Merge mcd Local...

SCO UnixWare Reliant HA 1.1.4 - Local Privilege Escalation

/ 04/2008: public release I have'nt seen any advisory on this; possibly still not fixed. SCO UnixWare Reliant HA Local Root Exploit By qaaz / include include include include include include define TGT1 "/usr/opt/reliant/bin/hvdisp" define TGT2 "/usr/opt/reliant/bin/rcvm" define DIR "bin" define B...

[TKADV2008-002] avast! 4.7 aavmker4.sys Kernel Memory Corruption

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory: avast! 4.7 aavmker4.sys Kernel Memory Corruption Advisory ID: TKADV2008-002 Revision: 1.0 Release Date: 2008/03/30 Last Modified: 2008/03/30 Date Reported: 2008/03/16 Author: Tobias Klein tk at trapkit.de Affected Software: avast! 4.7...

VLC <= 0.8.6e Subtitle Parsing Local Buffer Overflow Exploit

No description provided by source. / VLC =0.8.6.e Subtitle parsing local buffer overflow exploit Creadit to [email protected] vs Look2Me @ Tested on windows XP Pro SP2 / include stdio.h include stdlib.h include string.h char ssaheader= "Script Info\r\n" "Title: VLC = 0.8.6c,e buffer-overflow\r\n"...

Panda Internet SecurityAntiVirus+Firewall 2008 - CPoint.sys Memory Corruption

Panda Internet SecurityAntiVirus+Firewall 2008 - CPoint.sys Memory Corruption source: https://www.securityfocus.com/bid/28150/info Panda Internet Security/Antivirus+Firewall 2008 is prone to a vulnerability that allows local attackers to corrupt kernel memory. This vulnerability occurs because th...

X.Org xorg-x11-xfs <= 1.0.2-3.1 Local Race Condition Exploit

No description provided by source. !/bin/sh Xorg-x11-xfs Race Condition Vuln local root exploit CVE-2007-3103 Another lame xploit by vl4dZ : works on redhat el5 and before $ id uid=1001kecos gid=1001user groups=1001user $ sh xfs-RaceCondition-root-exploit.sh Generate large data file in...

DESlock+ <= 3.2.6 (list) Local Kernel Memory Leak PoC

No description provided by source. / deslock-list-leak.c Copyright c 2008 by [email protected] DESlock+ = 3.2.6 local kernel mem leak POC by mu-b - Fri 21 Dec 2007 - Tested on: DLMFENC.sys 1.0.0.26 kernel pool memory leak by continually allocating link list structures and never freeing them. Th...

DESlock+ <= 3.2.6 DLMFDISK.sys local kernel ring0 SYSTEM Exploit

No description provided by source. / deslock-pown-v2.c Copyright c 2008 by [email protected] DESlock+ = 3.2.6 local kernel ring0 SYSTEM exploit by mu-b - Wed 26 Dec 2007 - Tested on: DLMFDISK.sys 1.2.0.27 - Microsoft Windows 2003 SP2 - Microsoft Windows XP SP2 Note: create a mountable filesyste...

Firebird Remote Memory Corruption

Advisory Information Title: Firebird Remote Memory Corruption Advisory ID: CORE-2007-1219 Advisory URL: https://www.coresecurity.com/core-labs/advisories/firebird-remote-memory-corruption Date published: 2008-01-28 Date of last update: 2008-01-24 Vendors contacted: Firebird SQL Release mode:...

Debian Security Advisory DSA 155-1 (kdelibs)

The remote host is missing an update to kdelibs announced via advisory DSA 155-1. OpenVAS Vulnerability Test $Id: deb1551.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 155-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Microsoft Visual InterDev 6.0 SP6 - '.sln' Local Buffer Overflow

usage: exploit.py FileName import sys print "------------------------------------------------------------------------" print ' Microsoft Visual InterDev 6.0 SP6 ".sln" files Local Buffer Overflow' print " author: shinnai" print " mail: shinnaiatautisticidotorg" print " site:...

Microsoft Visual InterDev 6.0 (SP6) .sln File Local Buffer Overflow Exploit

Exploit for unknown platform in category local exploits =========================================================================== Microsoft Visual InterDev 6.0 SP6 .sln File Local Buffer Overflow Exploit =========================================================================== usage: exploit....

PHP <= 4.4.0 (mysql_connect function) Local Buffer Overflow Exploit

No description provided by source. ?php / This exploit was designed to work with PHP versions 4.3.10 and 4.4.0 under Windows XP SP 1. If another operating system is used, the replacement EIP must be changed. The replacement EIP is written 261 bytes into our string. For this exploit, I used a CALL...

Solaris SPARC / x86 Local Socket Hijack Exploit

No description provided by source. / $ An open security advisory 7 - SUN Solaris SOREUSEADDR Local Socket Hijack Bug 1: Bug Researcher: c0ntex - c0ntexbatgmail.com 2: Bug Released: July 06 2005 3: Bug Impact Rate: Medium / Hi 4: Bug Scope Rate: Local / Remote ...

WinUAE 1.4.4 - 'zfile.c' Stack Buffer Overflow

// source: https://www.securityfocus.com/bid/26979/info WinUAE is prone to a local stack-based buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it to an insufficiently sized memory buffer. An attacker can exploit this issue to execute...

CVE-2007-6227

QEMU 0.9.0 allows local users of a Windows XP SP2 guest operating system to overwrite the TranslationBlock codegenbuffer buffer, and probably have unspecified other impacts related to an "overflow," via certain Windows executable programs, as demonstrated by qemu-dos.com...

CVE-2007-6227

CVE-2007-6227 affects QEMU 0.9.0, where a local user in a Windows XP SP2 guest can overwrite the TranslationBlock (code_gen_buffer) due to an overflow, with unspecified additional impacts. The issue is documented across multiple advisories (Mandriva MDVSA-2008:162; Gentoo GLSA 2014-08-17; RH Red ...

CVE-2007-3749

The kernel in Apple Mac OS X 10.4 through 10.4.10 does not reset the current Mach Thread Port or Thread Exception Port when executing a setuid program, which allows local users to execute arbitrary code by creating the port before launching the setuid program, then writing to the address space of...

Sony CONNECT Player 4.x (m3u File) Local Stack Overflow Exploit

Exploit for unknown platform in category local exploits =============================================================== Sony CONNECT Player 4.x m3u File Local Stack Overflow Exploit =============================================================== !/usr/bin/python Secunia Advisory : SA27270 Release...